October is Cybersecurity Month, four whole weeks dedicated to drawing public attention to cybersecurity and cybercriminals. The biggest focus this year? Data. Data can be anything from someone’s address to their social security number, all things that cybercriminals love to get their hands on. Anything they can find, they can sell. And even if one didn’t realize they were being tricked, the next step upon realizing would be to get help immediately.
NC State University’s cybersecurity specialists provide a list of steps to avoid being scammed. The first step is to always be suspicious. It is so easy for criminals to create legitimate-looking texts, emails and even phone calls. Next, slow down. Criminals count on victims getting caught up in the hustle and bustle of life. Before someone clicks on any link or gives their personal information, they should read over everything and slow down. Lastly, ask for help. It can be hard to get help, but knowing who to contact can be the difference between a data breach and peace of mind that one’s data is secure.
While there are many different scams out in the digital world, cybersecurity specialists have identified four main scams. While they have some not-so-scary names, don’t be fooled, as these scams can be really terrifying when they happen to someone. The first type of scam, and the most prevalent one, is phishing, a scam where criminals will send someone an email claiming to be someone else or an organization. “A lot of times, they will send you an email claiming you have won a prize. The cybercriminal hopes you will be so excited that you will react quickly and click on a link to collect personal information or contact them,” said Elizabeth Cole-Walker, a cybersecurity specialist at NC State University. Scammers will sometimes offer fake jobs/scholarships or pretend to be people someone knows or has done business with.
The next type of scam is called smishing, which is where criminals will message a person over text, WhatsApp, Discord, or any other messaging platform. For the most part, smishing scammers are trying to get personal information like one’s credit card number or address, not hack their entire computer or phone. They will send someone a text claiming they have a speeding ticket, an overdue toll, an Amazon order can’t be completed, or the postal service can’t deliver their package. Before anyone enters any personal information, they should check their accounts intently or call the organization directly.
Similar to smishing, the next type is vishing. This scam involves the criminals calling a person on their phone directly or leaving a voicemail. They will pretend to be big businesses like Amazon, manipulate caller ID to look like it is legitimate, or take a recording of someone’s voice and make it seem like a loved one is in trouble. “With the rise of newer and better technology, we are seeing more and more people get scammed into believing they are sending money to their loved one who is in jail or in the hospital. All that scammers need is three seconds of your voice, and they can program AI to make “you” say anything,” said Cole-Walker.
The final type of scam is called quishing, where criminals will use a QR code to infect a device with malware or spyware and, in some cases, completely take control of the device. A lot of times, the QR code will be taped over the real one, a fake QR code entirely, or pretend to be a restaurant’s website/menu. The cybercriminals can install infectious code to spy on the victim or prompt fraudulent payments disguised as the website.
At the end of the day, the most important thing is to know when to get help. While it can be hard to admit you messed up or need help, the sooner you can recognize that you got scammed, the better. “It may seem hopeless, but by being more aware of the tactics of cybercriminals, you empower yourself to defend against them and counteract their criminal activities. It is important to share all you learn with others so that together you and all of us can be a force that successfully fights cybercriminals,” added Cole-Walker. While October is full of tricks, scares and spooky sights, don’t let being scammed be one of those.
